General
- Target 2026-07-29_5f2db96ea481594237161e449a9ccb1d_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- Sample260729-hr14bsxeqc
- SHA256 dfd95e15b9a4bb6c9884d01761147db2241725f68815c5b9dbc959fbfd568f8e
- MD5 5f2db96ea481594237161e449a9ccb1d
- SHA1 52c25508db4ff7d88e89d2dc1778a6bb898b25fe
- SHA512 4198de0078ee586830d7a945da15c1a3bfc4b11dcb85055731d4d7358eba6a243312651177fa3d807fb42c1d07d8b48a9af508dfdabb79fb077b1d094e802c7a
- SSDEEP 12288:cSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:vvO2xJKRw2kOkx2LFRvcUV
- TLSH T159F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_5f2db96ea481594237161e449a9ccb1d_amadey_coinminer_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_5f2db96ea481594237161e449a9ccb1d_amadey_coinminer_elex_smoke-loader_stop
- Size 766KB
- SHA256 dfd95e15b9a4bb6c9884d01761147db2241725f68815c5b9dbc959fbfd568f8e
- MD5 5f2db96ea481594237161e449a9ccb1d
- SHA1 52c25508db4ff7d88e89d2dc1778a6bb898b25fe
- SHA512 4198de0078ee586830d7a945da15c1a3bfc4b11dcb85055731d4d7358eba6a243312651177fa3d807fb42c1d07d8b48a9af508dfdabb79fb077b1d094e802c7a
- SSDEEP 12288:cSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:vvO2xJKRw2kOkx2LFRvcUV
- TLSH T159F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory